CVE-2023-23328

A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-03-10

Last modified

2026-07-09

Weaknesses

CWE-434

Affected products

• Avantfax (Avantfax)

References

• https://github.com/superkojiman/vulnerabilities/blob/master/AvantFAX-3.3.7/README.md